Lucene search

CVE-2020-26175

🗓️ 18 Dec 2020 10:13:15Reported by [email protected]Type

In tangro Business Workflow before 1.18.1, attackers can manipulate PERSON value in /api/profile requests to change other users' profile info

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 3
prion	Design/Logic Flaw	18 Dec 202010:15	–	prion
cve	CVE-2020-26175	18 Dec 202010:15	–	cve
cvelist	CVE-2020-26175	18 Dec 202009:27	–	cvelist

Nvd

Node

tangro business_workflowRange<1.18.1

Source	Link
tangro	www.tangro.de/
blog	www.blog.to.com/advisory-tangro-bwf-1-17-5-multiple-vulnerabilities/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

18 Dec 2020 10:15Current

6.3Medium risk

Vulners AI Score6.3

CVSS24

CVSS36.5

EPSS0.0016

CWE-639